@coreplane/switchboard 1.234.0 → 1.236.0

package/dist/assets/deploy/cloudflare-sandbox/worker.ts

@@ -43,6 +43,8 @@ import {
   recycledMidCommandMessage,
 } from "../../src/execution/sandboxLifecycle.js";
 import { envFromRequest } from "../../src/execution/sandboxEnv.js";
+import { IdleGuard, type IdleGuardHost } from "../../src/execution/sandboxIdle.js";
+import { StartGate, type StartGateHost, type StartingCause } from "../../src/execution/sandboxStart.js";
 import { RUNTIME_REPLACEMENT_WORDING, isRuntimeUnreachableSignal } from "../../src/execution/residentRefresh.js";
 import {
   fleetBusyAnswer,
@@ -52,6 +54,8 @@ import {
   runtimeUnreachableAnswer,
   runtimeUnreachableExecAnswer,
   SandboxRuntimeUnreachableError,
+  sandboxStartingAnswer,
+  sandboxStartingExecAnswer,
   thrownShape,
   thrownText,
 } from "../../src/execution/sandboxErrors.js";
@@ -166,16 +170,93 @@ interface FileRefusal {
   reason?: string;
 }
 
+/** The SDK's own limit on the warm-up command (`true`): generous, since the
+ *  SDK's start — an instance grant up to 30 s, the runtime's port up to 90 s
+ *  by its defaults — happens inside this one call. The executor's wait for
+ *  the `sandbox-starting` token is bounded on its own side. */
+const WARM_UP_BACKSTOP_MS = 4 * 60_000;
+
+/** Durable Object storage key of the idle ledger's served-time. */
+const IDLE_LEDGER_KEY = "switchboard.idle.lastServedAt";
+/** The scheduled-callback name of the idle sweep (a method below). */
+const IDLE_SWEEP_CALLBACK = "idleSweep";
+
 export class SwitchboardSandbox extends Sandbox<Env> {
-  // Idle lifetime of a thread's container (the SDK's own default is 10 min).
-  // Idle means idle: the SDK renews the activity timeout every second while a
-  // command's stream is open (its control connection's busy poll), so a
-  // running command never counts toward it and the shell-level `timeout` is
-  // the one deadline a command can hit (docs/reference/specs/execution.md item 2).
-  // 5 minutes frees the slot sooner while a prompt follow-up still reuses the
-  // warm workspace.
+  // The SDK's idle setting (its own default is 10 min), kept so its alarm
+  // loop calls `onActivityExpired` on this cadence — but on the 0.13 line that
+  // hook is a question to the runtime ("anything still running?"), not a
+  // deadline, and the answer kept twenty-five containers awake for 16 hours.
+  // The deadline itself is the guard's (docs/reference/specs/execution.md
+  // item 22): 5 minutes after the last request this object served, the
+  // container is destroyed, whatever runs inside; the shell-level `timeout`
+  // stays the one deadline a command can hit (item 2), since a request in
+  // flight is service.
   sleepAfter = SANDBOX_SLEEP_AFTER;
 
+  private readonly idle: IdleGuard;
+  private readonly gate: StartGate;
+
+  constructor(...args: ConstructorParameters<typeof Sandbox<Env>>) {
+    super(...args);
+    this.idle = new IdleGuard(this.idleHost());
+    this.gate = new StartGate(this.startHost());
+    // Every wake, including the one the SDK's own alarm causes on a leaked
+    // container: the baseline is read and a sweep armed before any request.
+    this.ctx.blockConcurrencyWhile(() => this.idle.wake());
+  }
+
+  /** The guard's view of this object: the platform's running flag, the SDK's
+   *  schedule table and clean destroy, the platform's kill, and storage. */
+  private idleHost(): IdleGuardHost {
+    return {
+      now: systemClock,
+      containerRunning: () => this.ctx.container?.running,
+      sweepScheduled: async () => (await this.listSchedules(IDLE_SWEEP_CALLBACK)).length > 0,
+      scheduleSweep: async (delayMs) => {
+        await this.schedule(Math.ceil(delayMs / 1000), IDLE_SWEEP_CALLBACK);
+      },
+      destroySandbox: () => this.destroy(),
+      killContainer: async () => {
+        await this.ctx.container?.destroy();
+      },
+      loadLastServedAt: () => this.ctx.storage.get<number>(IDLE_LEDGER_KEY),
+      saveLastServedAt: (at) => this.ctx.storage.put(IDLE_LEDGER_KEY, at),
+      log: (event) => console.log(JSON.stringify({ ...event, thread: this.ctx.id.name ?? this.ctx.id.toString() })),
+      wait: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    };
+  }
+
+  /** The start gate's view of this object (docs/reference/specs/execution.md
+   *  item 23): the platform's running flag, and a warm-up that is one trivial
+   *  command through the SDK — which does the start (instance grant, image
+   *  pull, boot, the runtime's port) and answers when the runtime does. The
+   *  warm-up runs inside the idle ledger so the guard sees a request in flight
+   *  for as long as the start takes. */
+  private startHost(): StartGateHost {
+    return {
+      now: systemClock,
+      containerRunning: () => this.ctx.container?.running,
+      warmUp: () =>
+        this.idle.served(async () => {
+          const proc = await createExtensionProcessSandbox(this).exec(["true"], { timeout: WARM_UP_BACKSTOP_MS });
+          await proc.output({ encoding: "utf8", timeout: WARM_UP_BACKSTOP_MS });
+        }),
+      log: (event) => console.log(JSON.stringify({ ...event, thread: this.ctx.id.name ?? this.ctx.id.toString() })),
+    };
+  }
+
+  /** The idle sweep, scheduled by the guard through the SDK's schedule table
+   *  and re-armed by it while a container is running. */
+  async idleSweep(): Promise<void> {
+    await this.idle.sweep();
+  }
+
+  /** The SDK's activity expiry, answered by the guard's verdict instead of the
+   *  runtime's process probes. */
+  override async onActivityExpired(): Promise<void> {
+    await this.idle.expired();
+  }
+
   /** One command as one supervised process (docs/reference/specs/execution.md
    *  item 4): `timeout -k 10 <secs> bash -c 'mkdir -p /workspace && cd
    *  /workspace && <command>'`, the caller's env on the process alone (item 5),
@@ -188,6 +269,28 @@ export class SwitchboardSandbox extends Sandbox<Env> {
     command: string,
     execTimeoutSecs: number,
     envVars: Record<string, string>,
+  ): Promise<ExecAnswer | ExecFailure> {
+    const startedAt = systemClock();
+    return this.idle.served(async () => {
+      try {
+        return await this.gate.through(
+          () => this.execute(command, execTimeoutSecs, envVars),
+          (cause) => sandboxStartingExecAnswer(cause),
+        );
+      } catch (err) {
+        // The warm-up's own failure, handed on by the gate: a full fleet or a
+        // silent control port keeps its name; anything else propagates.
+        return this.execFailure(err, startedAt);
+      }
+    });
+  }
+
+  /** `runCommand` without the ledger entry: the body, and the internal caller
+   *  (`readBase64`'s stat) that is already inside a served request. */
+  private async execute(
+    command: string,
+    execTimeoutSecs: number,
+    envVars: Record<string, string>,
   ): Promise<ExecAnswer | ExecFailure> {
     const startedAt = systemClock();
     const full = `mkdir -p ${WORKDIR} && cd ${WORKDIR} && ${command}`;
@@ -276,8 +379,20 @@ export class SwitchboardSandbox extends Sandbox<Env> {
     }
   }
 
+  /** A file route's answer while the container starts: HTTP 503 with the
+   *  token, like a full fleet's. */
+  private startingRefusal(cause: StartingCause): FileRefusal {
+    const { error, reason } = sandboxStartingAnswer(cause);
+    return { error, status: 503, reason };
+  }
+
   async readText(path: string): Promise<{ content: string } | FileRefusal> {
-    return this.fileOp(async () => ({ content: (await this.readFile(path, { encoding: "utf-8" })).content }));
+    return this.idle.served(() =>
+      this.gate.through(
+        () => this.fileOp(async () => ({ content: (await this.readFile(path, { encoding: "utf-8" })).content })),
+        (cause) => this.startingRefusal(cause),
+      ),
+    );
   }
 
   /** `encoding: "base64"` (src/execution/binaryRead.ts): the size first, from
@@ -285,7 +400,16 @@ export class SwitchboardSandbox extends Sandbox<Env> {
    *  decoded bytes to it — an SDK read that came back short would otherwise
    *  pass as the file. A file over the cap is refused by name inside a 200. */
   async readBase64(path: string): Promise<Base64ReadAnswer | FileRefusal> {
-    const stat = await this.runCommand(statCommandFor(path), 60, {});
+    return this.idle.served(() =>
+      this.gate.through(
+        () => this.readBase64Now(path),
+        (cause) => this.startingRefusal(cause),
+      ),
+    );
+  }
+
+  private async readBase64Now(path: string): Promise<Base64ReadAnswer | FileRefusal> {
+    const stat = await this.execute(statCommandFor(path), 60, {});
     if ("error" in stat) {
       // The stat's own named failure — a full fleet, a silent control port —
       // is the read's, token included, so the executor waits as it would
@@ -309,10 +433,16 @@ export class SwitchboardSandbox extends Sandbox<Env> {
   }
 
   async write(path: string, content: string): Promise<{ ok: true } | FileRefusal> {
-    return this.fileOp(async () => {
-      await this.writeFile(path, content);
-      return { ok: true as const };
-    });
+    return this.idle.served(() =>
+      this.gate.through(
+        () =>
+          this.fileOp(async () => {
+            await this.writeFile(path, content);
+            return { ok: true as const };
+          }),
+        (cause) => this.startingRefusal(cause),
+      ),
+    );
   }
 }
 

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.234.0",
+  "version": "1.236.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.234.0",
+      "version": "1.236.0",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -34,7 +34,10 @@
       "devDependencies": {
         "@earendil-works/pi-coding-agent": "0.85.1",
         "@eslint/js": "^10.0.1",
+        "@opencode/protocol": "2.0.3",
+        "@opencode/schema": "2.0.3",
         "@types/node": "^24.0.0",
+        "effect": "4.0.0-rc.112",
         "eslint": "^10.10.0",
         "eslint-config-prettier": "^10.1.8",
         "eslint-plugin-vue": "^10.11.0",
@@ -5863,6 +5866,90 @@
         "@chevrotain/types": "~11.1.2"
       }
     },
+    "node_modules/@msgpackr-extract/msgpackr-extract-darwin-arm64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-darwin-arm64/-/msgpackr-extract-darwin-arm64-3.0.4.tgz",
+      "integrity": "sha512-LCkGo6JDfaBhgST7UpPWgNgLINpcpabaHfyz5OBx75nUYxBsaEPxjnyNjWpeb/xBup/682QnBfRBy2/LvPutZQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-darwin-x64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-darwin-x64/-/msgpackr-extract-darwin-x64-3.0.4.tgz",
+      "integrity": "sha512-zExlW9zUJKZH/tOtVMttwjKa4Xm/3KcNjnE3dPN92uCktwavMxpgCA3MoJK/DOnTWsQgo224OaST27/mPNAf+w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-linux-arm": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-arm/-/msgpackr-extract-linux-arm-3.0.4.tgz",
+      "integrity": "sha512-Tg3yX65f5GbtXLkrYEHE5oibZG9epyYWas7FogTTEJeDEF9JlXJzKgXaNhT3UXlTOeA+AfZpYZYZ0uPj7Cfquw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-linux-arm64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-arm64/-/msgpackr-extract-linux-arm64-3.0.4.tgz",
+      "integrity": "sha512-dgX0P/9wGPJeHFBG+ZmhgE6bmtMt7NP5CRBGyyktpopdk/mW4POnrpQsSLtKI1dwpc+pPLuXHDh6vvskyQE/sw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-linux-x64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-x64/-/msgpackr-extract-linux-x64-3.0.4.tgz",
+      "integrity": "sha512-8TNXMEjJc3QEy7R/x1INhgiU+XakDAFUzBhaz7+Rbrs8NH5UQeHQxxmzsSBJGyV6I1jW79undiQm8tOI+D+8FQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-win32-x64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-win32-x64/-/msgpackr-extract-win32-x64-3.0.4.tgz",
+      "integrity": "sha512-CmCXPQrkbwExx3j946/PtHWHbYJiCRBRDl4BlkRQcJB/YOwQxJRTpoo7aTsortjgoJ1x7opzTSxn7C+ASSLVjQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
     "node_modules/@napi-rs/lzma-linux-x64-gnu": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-gnu/-/lzma-linux-x64-gnu-1.5.1.tgz",
@@ -6155,6 +6242,28 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@opencode/protocol": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/protocol/-/protocol-2.0.3.tgz",
+      "integrity": "sha512-DNHbkLDTuAyMsmVdnjuKulcfoDbllW2dxt4W19r2aJEYvswJpEO9168CSK6Sjbx1FOh/B9yL7SQgoDRMd4K5Vw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@opencode/schema": "2.0.3",
+        "effect": "4.0.0-rc.112"
+      }
+    },
+    "node_modules/@opencode/schema": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/schema/-/schema-2.0.3.tgz",
+      "integrity": "sha512-thPeBbqw4+SkZ/0LOuqfahSRGuWogRa/wwfIVyiQYsoE0vzLx8XUpHQ+FSUWkdz6llDtP0+ZsyBqXUMpXmPgbg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@standard-schema/spec": "1.1.0",
+        "effect": "4.0.0-rc.112"
+      }
+    },
     "node_modules/@oxc-project/types": {
       "version": "0.148.0",
       "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.148.0.tgz",
@@ -11840,6 +11949,17 @@
       "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
       "license": "MIT"
     },
+    "node_modules/effect": {
+      "version": "4.0.0-rc.112",
+      "resolved": "https://registry.npmjs.org/effect/-/effect-4.0.0-rc.112.tgz",
+      "integrity": "sha512-wXxwuh1Ywnv4cPRM3Wfa0vDwuOHnZ1TsTgHJkG9XgzND6inhBH9n1vBxhg3iIXOia/OrpmvVmd3lrD4vq6bF3A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-check": "^4.9.0",
+        "msgpackr": "^2.0.5"
+      }
+    },
     "node_modules/embla-carousel": {
       "version": "8.6.0",
       "resolved": "https://registry.npmjs.org/embla-carousel/-/embla-carousel-8.6.0.tgz",
@@ -12447,6 +12567,29 @@
       "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==",
       "license": "MIT"
     },
+    "node_modules/fast-check": {
+      "version": "4.10.1",
+      "resolved": "https://registry.npmjs.org/fast-check/-/fast-check-4.10.1.tgz",
+      "integrity": "sha512-sB5Vghiu8MyCyToHoBVGsT0baZg3sZWNIY+a6Ct2EDrQJlT4YdH6MC1BSLNe3kX1k5i5g0q1O52XFgcKK/rGHg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/dubzzz"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fast-check"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "pure-rand": "^8.0.0"
+      },
+      "engines": {
+        "node": ">=12.17.0"
+      }
+    },
     "node_modules/fast-deep-equal": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
@@ -15349,6 +15492,39 @@
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
       "license": "MIT"
     },
+    "node_modules/msgpackr": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/msgpackr/-/msgpackr-2.1.0.tgz",
+      "integrity": "sha512-p/pBCVO63CsvvpkomUnNNag6+n38rULuDA6HHe70o2gtC8ODI52foF/4ko2qQcp6OiErJXTmrZeXmsGGHsIQNQ==",
+      "dev": true,
+      "license": "MIT",
+      "optionalDependencies": {
+        "msgpackr-extract": "^3.0.4"
+      }
+    },
+    "node_modules/msgpackr-extract": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/msgpackr-extract/-/msgpackr-extract-3.0.4.tgz",
+      "integrity": "sha512-4kmO/MdyUIkLIvTPr8VHLil4AtoKIoniWPIEk5+CDy0xnWC84azhSFmuJ7PxZdsYtiP5kEeQsORAVIeMgxT+Hw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "node-gyp-build-optional-packages": "5.2.2"
+      },
+      "bin": {
+        "download-msgpackr-prebuilds": "bin/download-prebuilds.js"
+      },
+      "optionalDependencies": {
+        "@msgpackr-extract/msgpackr-extract-darwin-arm64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-darwin-x64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-linux-arm": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-linux-arm64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-linux-x64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-win32-x64": "3.0.4"
+      }
+    },
     "node_modules/muggle-string": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/muggle-string/-/muggle-string-0.4.1.tgz",
@@ -15453,6 +15629,22 @@
       "integrity": "sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==",
       "license": "MIT"
     },
+    "node_modules/node-gyp-build-optional-packages": {
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/node-gyp-build-optional-packages/-/node-gyp-build-optional-packages-5.2.2.tgz",
+      "integrity": "sha512-s+w+rBWnpTMwSFbaE0UXsRlg7hU4FjekKU4eyAih5T8nJuNZT1nNsskXpxmeqSK9UzkBl6UgRlnKc8hz8IEqOw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "detect-libc": "^2.0.1"
+      },
+      "bin": {
+        "node-gyp-build-optional-packages": "bin.js",
+        "node-gyp-build-optional-packages-optional": "optional.js",
+        "node-gyp-build-optional-packages-test": "build-test.js"
+      }
+    },
     "node_modules/node-mock-http": {
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/node-mock-http/-/node-mock-http-1.0.5.tgz",
@@ -16269,6 +16461,23 @@
         "node": ">=6"
       }
     },
+    "node_modules/pure-rand": {
+      "version": "8.4.2",
+      "resolved": "https://registry.npmjs.org/pure-rand/-/pure-rand-8.4.2.tgz",
+      "integrity": "sha512-vvuOGgcuPJAirlHvuQw1TrOiw7ptaIXXmIbNuiNOY6lNGJJH49PQ1Kj4nd783nPdQhQdicgOjVI2yI/9BD6/Ng==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/dubzzz"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fast-check"
+        }
+      ],
+      "license": "MIT"
+    },
     "node_modules/qified": {
       "version": "0.10.1",
       "resolved": "https://registry.npmjs.org/qified/-/qified-0.10.1.tgz",
@@ -20032,7 +20241,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.234.0",
+      "version": "1.236.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/pi-ai": "0.85.1",

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.234.0",
+  "version": "1.236.0",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",
@@ -91,7 +91,10 @@
   "devDependencies": {
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@eslint/js": "^10.0.1",
+    "@opencode/protocol": "2.0.3",
+    "@opencode/schema": "2.0.3",
     "@types/node": "^24.0.0",
+    "effect": "4.0.0-rc.112",
     "eslint": "^10.10.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-vue": "^10.11.0",

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.234.0",
-  "commit": "0c5f8c5e4657cd12a9bbf85177bee69b61505ac3",
-  "builtAt": "2026-09-16T16:44:55.183Z"
+  "version": "1.236.0",
+  "commit": "cf9308dd5f28ac788804260c2978403ce5b59c81",
+  "builtAt": "2026-09-16T20:27:06.883Z"
 }

package/dist/assets/src/core/coordinator/contract.ts

@@ -55,6 +55,18 @@ export function parseUnitKey(key: string): { instanceId: string; unit: string }
   return { instanceId: key.slice(0, at), unit: key.slice(at + 1) };
 }
 
+/** The unit an idempotency key names — the head of its step
+ *  (`<instance>:<unit>/<round>/<kind>` for the plan runner), or undefined for
+ *  a key whose step carries no unit prefix the unit pattern accepts. What the
+ *  `coordinator_tag` run event stamps as `unit`, so a run's stream names the
+ *  unit it ran for without parsing the key back. */
+export function unitOfIdempotencyKey(key: string): string | undefined {
+  if (!IDEMPOTENCY_KEY_PATTERN.test(key)) return undefined;
+  const step = key.slice(key.indexOf(":") + 1);
+  const head = step.split("/")[0];
+  return UNIT_PATTERN.test(head) ? head : undefined;
+}
+
 /** The event a child's terminal record sends its parent: the type carries the
  *  run id, so each `waitForEvent` matches its own child and a duplicate is
  *  buffered harmlessly. An event type is the platform's alphabet — letters,
@@ -85,10 +97,12 @@ export interface CoordinatorTag {
    *  (`CoordinatorInstance.base`), set by the spawn when the instance knows it.
    *  A coordinator's child is dispatched AT its unit branch so the resident
    *  attaches there, which makes the binding ref the branch itself — no base
-   *  the post-step could resolve from the thread — so the spawn says it. An
-   *  instruction to the run like `DispatchOptions.contract`, not a fact about
-   *  it: the fact the record keeps is the `pr_opened` it leads to, and
-   *  `coordinatorFields` leaves it off the rows. */
+   *  the post-step could resolve from the thread — so the spawn says it.
+   *  Published as the run's own `coordinator_tag` event at dispatch
+   *  (run-history item 48a), so a run re-attached after a bot roll — whose
+   *  dispatch options are gone with the process that spawned it — reads it
+   *  back off its ledger events; `coordinatorFields` still leaves it off the
+   *  rows, so rows and records keep the shape written before it existed. */
   base?: string;
 }
 
@@ -182,6 +196,11 @@ export interface CoordinatorUnit {
    *  — no pre-check, no branch, no round 0. A task string's row only; written by
    *  the hand-off, read by the driver into the machine's input. */
   resume?: { pr: number; headSha?: string; url?: string };
+  /** The head the unit's own coding child last pushed, recorded when the unit
+   *  ended `review_pending` (the wall clock capped after the pull request was
+   *  opened or updated): the next attempt's pre-check starts at the review
+   *  round when the open pull request still heads exactly here. */
+  lastPush?: string;
   /** The round boundaries the coordinator reported, oldest first (the `ship_round` vocabulary). */
   rounds: Array<{ index: number; agent: string; outcome: string; at: number }>;
   /** How the unit ended: the ending's kind and the thread's report, when it has. */
@@ -244,6 +263,7 @@ export function isCoordinatorUnit(v: unknown): v is CoordinatorUnit {
   if (r.issue !== undefined && !isFinite(r.issue)) return false;
   if (r.pr !== undefined && !isPr(r.pr)) return false;
   if (r.resume !== undefined && !isResume(r.resume)) return false;
+  if (r.lastPush !== undefined && !isText(r.lastPush)) return false;
   if (
     !Array.isArray(r.rounds) ||
     r.rounds.length > MAX_ROUNDS ||

package/dist/assets/src/core/coordinator/driver.ts

@@ -274,7 +274,18 @@ function readRecordReturn(step: string, a: BotAnswer): StepReturn {
 
 function prCheckReturn(step: string, a: BotAnswer): StepReturn {
   const { ok, state, prNumber, url, headSha, sha, mergedAt, at } = a.body;
-  if (ok === true && state === "none") return { type: "pr-check", step, pr: { state: "none" }, at };
+  if (ok === true && state === "none") {
+    const { unrecovered } = a.body;
+    return {
+      type: "pr-check",
+      step,
+      pr: {
+        state: "none",
+        ...(unrecovered === "no_commits" || unrecovered === "no_base" ? { unrecovered } : {}),
+      },
+      at,
+    };
+  }
   if (ok === true && state === "open" && typeof prNumber === "number" && typeof url === "string")
     return {
       type: "pr-check",
@@ -389,9 +400,16 @@ async function perform(
         ),
       );
     case "pr-check":
+      // `recover` rides only after a dead coding child: the bot opens the pull
+      // request from the pushed branch itself instead of answering `none`.
       return prCheckReturn(
         action.step,
-        answerOf("pr-check", await step.do(action.step, STEP_CONFIG, () => call(bot, "pr-check", tag))),
+        answerOf(
+          "pr-check",
+          await step.do(action.step, STEP_CONFIG, () =>
+            call(bot, "pr-check", { ...tag, ...(action.recover !== undefined ? { recover: action.recover } : {}) }),
+          ),
+        ),
       );
     case "sleep":
       await step.sleep(action.step, action.ms);
@@ -426,7 +444,11 @@ async function runUnit(
   // A resume at review (agent-ship item 10) rides the unit's row: the pull
   // request of ship's own the requester named opens the pipeline at its first
   // review round, with no pre-check, no branch and no round 0.
-  const resume = plan.units.find((u) => u.unit === unit)?.resume;
+  const row = plan.units.find((u) => u.unit === unit);
+  const resume = row?.resume;
+  // A previous attempt's `review_pending` head: the machine's pre-check starts
+  // at the review round when the open pull request still heads exactly there.
+  const lastPush = row?.lastPush;
   let state: UnitPipelineState = openUnitPipeline(
     {
       unit: { id: unit, branch: node.branch },
@@ -441,6 +463,7 @@ async function runUnit(
       merge: plan.merge,
       generated: plan.generated,
       ...(resume !== undefined ? { resume } : {}),
+      ...(lastPush !== undefined ? { lastPush } : {}),
     },
     start.at,
   );
@@ -486,6 +509,11 @@ async function runUnit(
           ...tag,
           ending: { kind: note.ending.kind, report: renderUnitReport(state, endFacts) },
           ...(state.pr !== undefined ? { pr: state.pr } : {}),
+          // A review_pending ending names the child's own last push so the next
+          // attempt's pre-check can start at the review round (the row's lastPush).
+          ...(note.ending.kind === "review_pending" && note.ending.headSha !== undefined
+            ? { headSha: note.ending.headSha }
+            : {}),
           ...(state.lastCodingRunId !== undefined ? { codingRunId: state.lastCodingRunId } : {}),
         };
         await step.do(`${unit}/end`, STEP_CONFIG, () => call(bot, "unit-end", body));